| Summary: | dev-libs/libgpg-error-1.49: Filesize does not match recorded size | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | dE <de.techno> |
| Component: | Current packages | Assignee: | Gentoo's Team for Core System packages <base-system> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | ||
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: | Failed build log for dev-libs/libgpg-error-1.49 | ||
|
Description
dE
2024-06-01 05:15:43 UTC
Please fix your GENTOO_MIRRORS. Anyway, upstream have a habit here of reuploading with new signatures. $ diff -u <(pgpdump /var/cache/distfiles/libgpg-error-1.49.tar.bz2.sig) <(pgpdump /tmp/libgpg-error-1.49.tar.bz2.sig._checksum_failure_.jj2y2rzd)
--- /dev/fd/63 2024-06-25 02:52:31.874835659 +0100
+++ /dev/fd/62 2024-06-25 02:52:31.877835691 +0100
@@ -12,3 +12,17 @@
Hash left 2 bytes - be 58
EdDSA R(255 bits) - ...
EdDSA s(256 bits) - ...
+Old: Signature Packet(tag 2)(117 bytes)
+ Ver 4 - new
+ Sig type - Signature of a binary document(0x00).
+ Pub alg - EdDSA Edwards-curve Digital Signature Algorithm(pub 22)
+ Hash alg - SHA256(hash 8)
+ Hashed Sub: issuer fingerprint(sub 33)(21 bytes)
+ v4 - Fingerprint - ac 8e 11 5b f7 3e 2d 8d 47 fa 99 08 e9 8e 9b 2d 19 c6 c8 bd
+ Hashed Sub: signature creation time(sub 2)(4 bytes)
+ Time - Fri Apr 26 06:29:51 BST 2024
+ Sub: issuer key ID(sub 16)(8 bytes)
+ Key ID - 0xE98E9B2D19C6C8BD
+ Hash left 2 bytes - b2 20
+ EdDSA R(255 bits) - ...
+ EdDSA s(255 bits) - ...
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=75d9e23fe468fd733ba17f317f937ede413d68c1 commit 75d9e23fe468fd733ba17f317f937ede413d68c1 Author: Sam James <sam@gentoo.org> AuthorDate: 2024-06-25 01:53:26 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-06-25 01:53:26 +0000 dev-libs/libgpg-error: update Manifest for 1.49 signature Same thing as usual where they seem to upload a new signature a while after the release with just an additional sig inside: ``` $ diff -u <(pgpdump /var/cache/distfiles/libgpg-error-1.49.tar.bz2.sig) <(pgpdump /tmp/libgpg-error-1.49.tar.bz2.sig._checksum_failure_.jj2y2rzd) --- /dev/fd/63 2024-06-25 02:52:31.874835659 +0100 +++ /dev/fd/62 2024-06-25 02:52:31.877835691 +0100 @@ -12,3 +12,17 @@ Hash left 2 bytes - be 58 EdDSA R(255 bits) - ... EdDSA s(256 bits) - ... +Old: Signature Packet(tag 2)(117 bytes) + Ver 4 - new + Sig type - Signature of a binary document(0x00). + Pub alg - EdDSA Edwards-curve Digital Signature Algorithm(pub 22) + Hash alg - SHA256(hash 8) + Hashed Sub: issuer fingerprint(sub 33)(21 bytes) + v4 - Fingerprint - ac 8e 11 5b f7 3e 2d 8d 47 fa 99 08 e9 8e 9b 2d 19 c6 c8 bd + Hashed Sub: signature creation time(sub 2)(4 bytes) + Time - Fri Apr 26 06:29:51 BST 2024 + Sub: issuer key ID(sub 16)(8 bytes) + Key ID - 0xE98E9B2D19C6C8BD + Hash left 2 bytes - b2 20 + EdDSA R(255 bits) - ... + EdDSA s(255 bits) - ... ``` Closes: https://bugs.gentoo.org/933300 Signed-off-by: Sam James <sam@gentoo.org> dev-libs/libgpg-error/Manifest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) |
